A Zero-Value Withdrawal Drained 97 Million CORE From Bitcoin Staking Platform b14g

By Isaac • November 1, 2026 11:13 am •

A single zero-value withdrawal request was enough to trigger a full payout from dozens of staking positions, draining roughly 97 million CORE from the Bitcoin staking platform b14g.

The attack did not break the Core blockchain or its validator system. Instead, an on-chain investigation from Bitquery found that the failure sat in the way b14g passed withdrawal instructions into Core’s staking contracts.

In Core’s staking logic, a withdrawal amount of zero means withdraw everything. The attacker sent zero-value requests across 91 b14g staking orders in one transaction.

Each order paid out in full.

Bitquery followed the drain transaction, its payouts and the later movement of the tokens through Core’s public node, tracing the first attacker wallet,